PRIVACY POLICY

1. ENTIRETY

Protecting the security, privacy and integrity of its data customers and potential customers (hereinafter “Data Subjects” or “Users”)’s personal data is important to TEXA S.p.A (hereinafter "TEXA"), which acts in compliance with the laws currently in force on the protection and security of personal data (Legislative Decree 196/2003 and EU Regulation 679/2016).Therefore, the aforementioned data will be processed by TEXA carefully and for specific purposes, in line with the consent that may have been release by the Data Subjects, in compliance with the provisions of the law on the protection and security of the aforementioned data.For this reason, this document illustrates, pursuant to art. 13 of Legislative Decree. 196/2003 and of the articles 13 and 14 of EU Regulation 679/2016, how the personal data of the Data Subjects are collected, processed and protected.

The Site and the Account are directed towards a professional user (B2B). However, following his or her consultation or voluntary registration therein, data related to identified or identifiable individuals may be processed: personal data are collected and processed for purposes strictly related to the use of the Website, to the registration processes envisaged therein, to the use of the services reserved to Registered Users and offered through the Website.
The data Controller is TEXA S.p.A. with registered office in Via 1° Maggio 9 - 31050 Monastier (TV), email privacy@texa.it. The processing operations connected to the web services of the Site take place at the aforementioned office of the Data Controller and are handled by the staff of the offices in charge of processing the data.

Types of processed data
Following the navigation of the Site, the data of the Data Subjects indicated below may be processed:

Navigation data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but due to its very nature could, through processing and association with data held by third parties, allow the identification of the Data Subjects.

This category of data includes:

the IP addresses or domain names of the computers used by the Users who connect to the Website,

the addresses in the URI (Uniform Resourse Identifier) ​​notation of the requested resources,

the time of the request,

the method used in submitting the request to the server,

the size of the file obtained in response,

the numerical code indicating the response status given by the server (successful, error, etc.) and other parameters relating to the operating system and the IT environment of the Data Subject.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct operation.

The data may be used to ascertain possible liabilities in case of hypothetical computer crimes against the Site: except for this eventuality, the data are kept within the timeframe defined by the regulations of reference for the time strictly necessary to provide the Data Subject with the requested service and to guarantee the transmission of the communication.

Data voluntarily provided by the User

Aside from what is specified for the navigation data that are necessary to implement the IT and digital protocols, the provision of personal data by Users is free and optional, although useful for the provision of certain services: in these cases, therefore, failure to provide the data could compromise or make it impossible to provide the service. Personal data provided by Users who voluntarily interact with the Site, provided for the obtainment of certain services (registration to the web portals mytexa.com, care.texa.com, texa.telemobility.com, servicecode.net, etruck-worshop.texa.com, etruck-fleet.texa.com, customercare.texa.com, registration to events, subscription to the newsletter, requests for information, sending of emails), are used only to perform the service requested and are communicated to third parties only if this is strictly necessary for the performance of the service.
The personal data that the User may voluntarily provide are the following:

The provision of data for purposes of direct marketing and profiling is optional, and the User is free to give his/her consent for such processing. This consent may be revoked at any time by modifying the data associated with the User's profile at the time of each new access to the User's account on the site. For the processing of personal data, which consists of sending email newsletters as well as information material relating to the services offered by the Data Controller it will be possible to revoke the consent by clicking on the link Unsubscribe at the bottom of each email or by sending an email to privacy@texa.it inserendo nell’oggetto “cancellazione newsletter”.Specific summary information is reported or displayed on the pages of the Site prepared for services on request, in such a way as to draw the attention of the Data Subject to the processing of his/her personal data. Furthermore, depending on the case, the compulsory or optional nature of the provision of personal data will be highlighted by adding a specific character (*) to any information of a mandatory nature.

Cookies

Some areas of the Site may use cookies to improve the browsing experience and customize the site based on the User's needs.

For more information on the Company's Cookie Policy, please visit the following link: Cookie Policy.

Links to other websites

On TEXA web pages, it is possible to find hyperlinks to other websites, in order to provide a better service to its Users.

TEXA is in no way responsible for the content of the websites that Users may access through its Site.

The existence of a hyperlink to another site does not therefore imply any endorsement or acceptance of responsibility by TEXA about the content of the new site accessed, also in relation to the policy adopted for the processing of personal data, as well as its use.

Processing Purpose

Personal data voluntarily provided by the Users of the Site are processed for the following purposes:

• To allow the use of the services reserved for registered Users accessible from the web portals listed in the previous point, aimed at a better management of the relationship with the User;

• To register for the events advertised in the site and/or in the reserved area accessible through the web portals (seminars, webinars) and for the consequent management of the related organizational and administrative obligations;

• To send, via email, answers regarding our products and services;

• To anonymously process statistics (e.g. to evaluate the number of accesses);

• To send the newsletter via email;

• Subject to the explicit consent by the User, to carry out direct marketing and/or profiling activities with automated tools (in particular via email) and with non-automated tools (telephone with operator or post);

• To comply with legal obligations and provisions of the competent Authorities.

Duration of retention of personal data

Users' personal data will be retained only for the time necessary to guarantee the correct performance of the services requested and offered through the web portals or for the achievement of any other legitimate connected purpose (for example, where they are relevant to a defence against claims made against TEXA or in the presence of a legitimate interest) and for the duration necessary for the same purpose.

Therefore, if the personal data are processed for two different purposes, the data will be retained until the finality ends in the longer term; however, personal data will no longer be processed for purposes whose retention period has ceased.

If the account is cancelled or disabled, the User's data will be stored for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations regarding the conservation of accounting documentation.

The data processed for sending newsletters or for marketing or profiling purposes will be processed for a period proportionate to these purposes and in any case as long as the user remains registered to the newsletter or does not cancel his consent.

Data Controller and Processing Place
The Data Controller is TEXA S.p.A. with registered office in Via 1 Maggio 9 - 31050 Monastier (TV), email privacy@texa.it. The processing connected to the use of the App, of the services and/or of TEXA CARe contents takes place at the aforementioned office of the Data Controller and is handled by the staff of the offices in charge of processing.

Types of processed data
When creating the account, the User provides TEXA with personal data such as name, surname, telephone number and email address.
Moreover, when the user interacts with the App to the web portal www.texa.care, TEXA may be collect the navigation data and the cookies referred to in the preceding point 1.1.
Geolocation information, in particular the data relating to the position of the vehicle, better described below, will be collected by TEXA exclusively: (i) In case of activation by the User of the SOS Service; (ii) in case of an event that activates the SOS Service as described below. To consult the terms and conditions of delivery of the SOS Service, please refer to the Contractual Conditions and Terms of Use of the SOS Service that can be consulted at the time of activation of the SOS Service or by the Settings menu of the App or the link on the website www.texa.care.

Processing Purpose
The processing of personal data that TEXA intends to carry out has the following purposes:

Fulfilment of the obligations deriving from the provision of the services requested by the User through registration to the app and the creation of their own account, including the collection, storage and processing of personal data for the purposes of the provision by the Authorized Installer of technical and operational services and of the communication to the User regarding the performance of Services.

Fulfillment of legal, accounting, fiscal, administrative and contractual obligations related to the provision of the Services;

Management of the relations with authorities and public entities for purposes connected to particular requests, the fulfilment of legal obligations or specific procedures (e.g. SOS Services, in which case it should be noted that any geolocation data will be transmitted and made available by TEXA exclusively in case of activation, on request by the User, of the SOS Service and in case of an event that activates the SOS Services);

Preparation of a geolocation system only in cases where the SOS Service has been activated, upon request of the User;

Preparation of initiatives connected to the contractual relationship and aimed at improving the Services;

Preparation of commercial, promotional, advertising and marketing initiatives with the express consent of the User.

Geolocation data
For the purposes of providing the SOS Service, the App uses the data relating to the User's position based on data sent from the TEXA CARe product to TEXA.
This data and geolocation information and in particular the position of the Vehicle are transmitted from the TEXA CARe product to TEXA through the App, exclusively if an event activates the SOS Service according to the terms and conditions of use of the SOS Service that can be consulted at the time of activation of the SOS Service or from the Settings menu of the App or the link on the website www.texa.care.
The transmission of geolocation information regarding the Vehicle is conditioned by the operation of the SOS Service and therefore by the correct installation and configuration of the TEXA CARe Product and its connection with the Smartphone according to the terms and conditions of use of the SOS Service.
In order to make it possible the transmission of geolocation information, the User will have the obligation to select, in the privacy settings of the Smartphone connected to the TEXA CARe Product, the activation for the App of the permission to use the location data.
The TEXA CARe Product will not transmit any additional geolocation data via the Smartphone outside the operation and activation of the SOS Service. The processing of location data will be carried out by TEXA exclusively for the purpose of providing the SOS Service requested by the User.

Protection of Geolocation data

Some services may only be offered where the users reveal their location or the location of their vehicle. TEXA takes very seriously the confidentiality of location data.

The following are the security measures applied to the Location Data (including information accessible within the vehicle assistance process): these data are stored, in the form associated with the users or their vehicles, only for the time necessary to comply with the permitted purposes.

Such data are collected, stored or accessible in the form necessary to provide the requested service, or in accordance with the law. Vehicle Location Data and Device Location Data are not linked to each other unless this is necessary to provide the requested service; for any other use of Vehicle Location and Device Data for statistical analysis purposes only irreversibly anonymous data will be used.

TEXA and the sales and service concessionaires or authorized workshops may have access to Vehicle Location Data and BMW AG may also have access to the Device Location Data through the services provided by it (for example, ConnectedDrive).

The users will be provided with a detailed description of the Location Data necessary to provide a service based on such Data, at the time of purchase of the vehicle or when the service or application has been activated or configured (for example, ConnecedDrive or Connected App).

TEXA will not be able to provide the users with certain functionalities of its services, in case they limit the collection of their Location Data.

Duration of retention of personal data
Users' personal data will be kept only for the time necessary to guarantee the correct performance of the services requested. If the account is cancelled or disabled, the User's data will be stored for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations regarding the conservation of accounting documentation.

2.3. DATA COLLECTED THROUGH THE SUBSCRIPTION TO THE ESHOP

Types of processed data
The TEXA APP portal ("Portal"), accessible through the portal mytexa.com we , and the IDC5 software ("IDC5 Software"), both owned by TEXA, provide access to the InfoTech Online ("Eshop") function through which it is possible to buy online ("E-Commerce Service") digital content owned by TEXA or licensed to TEXA (the "Products").
TEXA's E-Commerce Service is provided by the company Calicantus s.r.l., with registered office in Via A. Tommaso, 43, 30020 Quarto D'Altino (VE) ("Calicantus"), which sells the Products marketed on the Eshop.
Following the registration with the Eshop and/or the use of the E-Commerce Service, the following categories of personal data will be processed:

Contact data, such as name, address, email and telephone number

Payment data and payment history

Credit information

Order information in addition to navigation data and the cookies referred to in the preceding point 2.1.

Processing Purpose
The processing of personal data is exclusively aimed at the achievement of the following purposes:

To allow the registration with the Eshop, the management of registration credentials and the administrative and legal procedures connected to the same;

If the User wants to use the E-Commerce Service provided by Calicantus

In order to make it possible for Calicantus to correctly execute the transactions related to online purchases and, therefore, to correctly and timely fulfill all obligations deriving from the contractual relationship, as well as for the administrative and legal obligations connected to it and

following communication by Calicantus to TEXA of the personal data provided by the User on the occasion of the purchase on the Eshop, to allow TEXA, in its capacity as Independent Data Controller, to manage after-sales assistance.

With the prior consent of the User, for the communication by Calicantus to TEXA of the personal data provided by the User on the occasion of the purchase on the Eshop, for the offer, by TEXA, as an independent Controller, of promotional and advertising initiatives, to carry out market and statistic research also aimed at assessing the degree of user satisfaction and for sending information on future commercial activities and announcements regarding new products, services and offers through automated systems, such as emails or text messages, or by postal service or telephone.

The provision of data for the purposes referred to under the preceding letters a), b) point i. and b) point ii is merely optional. However, as this processing is necessary to make it possible to register to the Eshop and the provision of the E-Commerce Service, any refusal to provide the data in question will make it impossible for the User to register to the Eshop and to perform purchases through the same.
With reference to the purposes of the processing referred to in letter c), the consent to the processing of data is purely optional and may be expressed by the user through the selection of a special box at the bottom of the form used to register to the EShop. The lack of consent will not have any consequence on the possibility of registering to the EShop and/or making purchases through the same and will only imply the consequences described below:

The lack of consent to the processing of personal data for the purposes referred to in letter c) above, will make it impossible for Calicantus to communicate the User's data to TEXA and to acquire such data to carry out market and statistic research also aimed at assessing the degree of satisfaction of users as well as at communicating promotions, discounts, concessions and information on future commercial activities and announcements of new products, services and offers via email, or via postal service.

Data Controller and Processing Place
The personal data provided during the registration to the Eshop according to the previous paragraph letter (a) are processed by the companies TEXA and Calicantus in their capacity as co-Controllers. Therefore, any claims and requests relating to the processing of data may be sent by the User, without distinction, to each of the Joint Data Controllers, at the following addresses:

The personal data provided on the occasion of a purchase on the Eshop pursuant to the preceding paragraph letter (b) point i. are processed by Calicantus as an independent Controller. The User can send any claims and requests relating to the processing of such data to the above address.
The personal data provided when making a purchase on the Eshop in accordance with the previous paragraph letter. (b) point ii. as well as personal data provided for marketing purposes pursuant to letter (c) are processed by TEXA as an independent Controller. All claims and requests relating to the processing of such data must be sent to the above TEXA address.
TEXA and Calicantus undertake to respond to any reasonable request relating to personal data and to correct, amend or delete any inaccuracies. Any questions or comments regarding this privacy policy must be sent to the email addresses indicated above.

Duration of retention of personal data

Users' personal data will be retained until the User is an active customer. If the account is cancelled or disabled, the User's data will be stored for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations regarding the conservation of accounting documentation.

2.4. DATA COLLECTED ON THE OCCASION OF COMMERCIAL OFFERS, ORDERS MANAGEMENT AND SUBSCRIPTION OF SUPPLY AND LEASE CONTRACTS

Although this Privacy Notice also describes some of the treatments that the sales and service dealers and authorized workshops can perform on the users’ personal data, they may collect additional information concerning them when their services are provided, providing for this aim its own privacy regulation. In this case, the users should directly contact the sales and service dealer or the authorized workshop regarding any changes or issues related to the use of their personal data.

Data Controller and Processing Place
The Data Controller is TEXA S.p.A. with registered office in Via 1° maggio 9 - 31050 Monastier (TV), email privacy@texa.it. The processing operations connected to the sending of commercial offers, the management of orders and the signing of supply and lease contracts take place at the aforementioned office of the Data Controller and are handled by the staff of the offices in charge of processing.

Types of processed data
The personal data whose provision is necessary for the correct performance of the commercial and contractual relationship with the Data Subject, are the following:

Name and Surname

Email address

Name and data of the company the User belongs to (Name, address, VAT No. and Tax Code)

Bank account number (IBAN)

Phone contacts

Processing Purpose
The data are collected for the following purposes, strictly related to the establishment and continuation of the commercial and/or contractual relationship:

Drafting of offers

Fulfillment of fiscal or accounting obligations and contractual obligations

The aforementioned data are processed for the purpose of the correct management of offers or supply orders and related activities in accordance with the applicable legislation.

Duration of retention of personal data
The personal data provided will be kept for the entire duration of the contractual relationship and at the end of the same these data will be stored for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations on the conservation of accounting documentation.

2.5. DATA COLLECTED WHEN ACCESSING TEXA FACILITIES

Data Controller and Processing Place
The Controller:

Of the data collected on the occasion of access to the facilities of TEXA S.p.A. is the same TEXA S.p.A. based in Via 1° maggio 9 - 31050 Monastier (TV), email privacy@texa.it. The processing related to the access to TEXA S.p.A. facilities takes place at the offices of the Data Controller and is carried out by the staff of the offices in charge of processing.

Of the data collected on access to the TEXA Deutschland GmbH premises is the same TEXA Deutschland GmbH, with registered office in Bei der Leimengrube 11, D 74243 Langenbrettach, email info.de@texa.com. The processing related to the access to the TEXA Deutschland GmbH headquarters takes place at the offices of the Data Controller and is handled by the staff of the offices in charge of processing.

Of the data collected on access to the TEXA UK Limited site is the same TEXA UK Limited with its registered office at 32-34 Churchill Way, Lomeshaye Ind. Est., Nelson, Lancashire, BB9 6RT, email info.uk@texa.com. The processing related to access to the TEXA UK Limited site takes place at the aforementioned office of the Data Controller and is carried out by the staff of the offices in charge of processing.

Of the data collected on access to the TEXA France Sarl site is the same TEXA France Sarl with its registered office at 12 Rue Jules Grévy - 42350 La Talaudière - France,email info.fr@texa.com. The processing connected to access to the TEXA France Sarl headquarters takes place at the offices of the Data Controller and is carried out by the staff of the offices in charge of processing.

Of the data collected on access to the headquarters of TEXA IBERICA DIAGNOSIS, S.A. is the same TEXA IBERICA DIAGNOSIS, S.A. based in Polígono Can Mascaró, Calle Llevant, 2, 08756 La Palma de Cervelló, Barcelona, ​​email info.es @ texa.com. The processing related to access to the headquarters of TEXA IBERICA DIAGNOSIS, S.A. takes place at the aforementioned office of the Controller and is handled by the staff of the offices in charge of processing.

Of the data collected on access to TEXA POLAND SP. Z O.O.is the same TEXA POLAND SP. Z O.O.based in ul. Brzezińska 52A; 41-404 Mysłowice, email info.pl@texa.com. The treatments related to access to the headquarters of TEXA POLAND SP. Z O.O. take place at the aforementioned headquarters of the Controller and are handled by the staff of the offices in charge of processing.

Types of processed data
The personal data that are collected are the following:

Name and Surname

Name of the company to which the User belongs

Processing Purpose
Each Data Controller collects data exclusively to ensure the security of its personnel and of the visitors themselves. The collected data are used in order to be able to track visitors in case of need.

Duration of retention of personal data
The data are erased after 7 days since their collection.

2.6 DATA COLLECTED ON THE OCCASION OF EXHIBITION, EVENTS, CONFERENCES AND
SIMILAR EVENTS, ON THE OCCASION OF EXHIBITIONS, EVENTS, CONFERENCES AND SIMILAR
EVENTS

Data Controller and Processing Place
The Data Controller is TEXA S.p.A. with registered office in Via 1° maggio 9 - 31050 Monastier (TV). The processing operations connected to data collected during exhibitions, events, conferences and similar events take place at the offices of the Data Controller and are handled by the staff of the offices in charge of processing.

Types of processed data
The personal data provided on the specially prepared paper or computer form are the following:

Name and Surname

Address

Email address

Name of the company to which the User belongs

Products of interest

Possible type of TEXA customer

In this case, the paper or computer form serves as a consent form. The data provided on the paper form are transferred to a digital database for processing the preferences expressed and for sending marketing communications.

Processing Purpose
TEXA collects data exclusively to offer the potential customer marketing information about the products and services provided by TEXA itself. TEXA will send free periodic communications to the potential customer for this purpose. The User can revoke his/her consent at any time through the link dedicated to cancelling the registration in the lower part of the body of marketing emails or by sending an email to privacy@texa.it inserting in the subject "Newsletter cancellation". The marketing emails are based on the preferences provided in the consent form.

Duration of retention of personal data
The data will be retained until the potential customer decides to cancel his/her registration. In case of cancellation, the Users' data will be stored for administrative purposes for a period not exceeding one semester, without prejudice to any specific legal obligations on the conservation of accounting documentation.

The Data Controller is TEXA S.p.A. with registered office in Via 1° Maggio 9 – 31050 Monastier (TV), email privacy@texa.it.
The processing operations connected to the sending of candidature place at the aforementioned office of the Data Controller and are handled by the staff of the offices in charge of recruiting and managing human resources.

Types of processed data

Following the submission of the Curriculum Vitae by the candidate, TEXA S.p.A will treat the following data:

Personal and contact (es. name, surname, address, phone number etc.);

Data related to past work experience, education and training;

Health data (if any) as strictly necessary to assess the suitability of the job duties to be established;

The personal data of the candidate will be processed by virtue of the consent expressed through the authorization to the processing of personal data at the bottom of the sent Curriculum Vitae.

The provision of data and consent to their processing are optional; in the absence, however, TEXA S.P.A will be precluded the possibility of proceeding with the assessment and selection of the candidate.

Processing Purpose

The data will be processed for the sole purpose of assessing the candidate, sending him the relevant communications and possibly establishing the employment relationship.

Duration of retention of personal data

Personal data will be kept for the time necessary to fulfil the aforementioned purposes and in any case no later than 18 months from receipt of the data and / or from the end of the related evaluation process.

Communication and disclosure of data

The data is communicated to other companies of the TEXA Group which operate as autonomous data controllers but with the same modality and guarantees as the present informative note, and recognizing the same rights to the data subjects for the sole purpose of assessing, also in these companies, or establishing a working relationship with the candidate.

2.8. DATA COLLECTED ON THE OCCASION OF THE ENROLLMENT IN A TEXAEDU COURSE

Data Controller and data processing location

The Data Controller is TEXA, with registered offices at Via 1 Maggio 9 - 31050 Monastier (TV), e-mail privacy@texa.it. The processing of data related to the application to the course takes place at the above-mentioned offices of the Data Controller by the parties assigned to data processing.

Type of processed data
After the application for registration to a TEXAEDU course, TEXA will process the following data:

Purposes of data processing TEXA will process personal data, subject to the consent of the concerned people, for the following purposes:a) For processing applications to TEXAEDU training course, for the proper management of this request by the parties assigned to data processing by TEXA S.p.A., and in order to communicate information related to the request;b) For sending the newsletter;c) For sending communication about initiatives, promotion of new products and training courses;d) For possible profiling activity, exclusively by TEXA and by people in charge of services related to the above-mentioned;e) For the communication of personal data to TEXA S.p.A.’s official retailers.

Duration of the retention of personal dataData will be retained for a period of time that is proportionate to the pursuit of the above-indicated purpose, for the time requested by specific law requirements, and/or for subscriptions to the newsletter until data subjects request cancellation from the Newsletter mailing list.

3. PROCESSING METHODS

Personal data are processed mainly with automated and electronic tools, for the time strictly necessary to achieve the purposes for which they were collected, by persons specifically appointed to do so in compliance with the provisions of Articles 31 et seq. of Legislative Decree 196/2003 and 32 et seq. of EU Regulation 679/2016.

Specific security measures are observed to prevent the loss of data, illicit or incorrect use of the same and unauthorized access, so as to allow access only to those appointed or responsible in accordance with the provisions of the law. The list of persons in charge pursuant to art. 29 of Legislative Decree 196/2003 and art. 28 of EU Regulation 679/2016 is available at the headquarters of the Data Controller.

The personal data acquired, also through paper forms, will be stored on electronic media, stored on servers owned by TEXA and located at the headquarters of the latter, managed in a protected environment with controlled access.

4. COMMUNICATION AND DISCLOSURE OF DATA

Without prejudice to communications made in compliance with legal obligations, all personal data collected and processed may be communicated for the purposes described above to the following subjects:

Companies of the TEXA Group;

Subjects appointed by TEXA for the performance of activities directly connected or instrumental to the supply and distribution of products and services.

Subjects who can learn about it, as "officials" or "agents" of TEXA, such as staff belonging to administrative, commercial, productive, technical and IT offices.

The updated list of all data processors may be requested from the Data Controller identified below, by sending an email to the address: privacy@texa.it

5. RIGHTS OF THE DATA SUBJECTS

Pursuant the current legislation on Privacy, Legislative Decree no. 196/2003 and s.m.i. and EU Regulation n. 2016/679 the following rights are recognized to each Data Subject:

Right to be informed about the processing of data conferred to TEXA (art. 12-14 UE Regulation n. 2016/679);

Right to obtain from TEXA the confirmation that personal data are being processed and, in this case, to obtain access to personal data access by the data subject, request rectification, updating and integration (art. 15-16 UE Regulation n. 2016/679);

Right to obtain from TEXA the deletion of data or the limitation of processing if there is one of the reasons set out in art. 17-18 of the EU Regulation n. 2016/679 and the right to oppose processing (art. 21 UE Regulation n. 2016/679);

Right to data portability (art. 20 UE Regulation n. 2016/679);

Right not to be subjected to decisions based solely on automated processing (art. 22 UE Regulation n. 2016/679).

The concerned parties are also recognized the right to propose a claim to the Privacy Authority for the protection of personal data (Article 77 of EU Regulation No. 2016/679).

If the processing of personal data is based on the consent of the Data Subject, he/she has the right to revoke the given consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before revocation (Article 7 of EU Regulation n. 2016/679).

With regard to the provided data, the Data Subject may exercise the users’ rights or request. Further information regarding the processing of data can be obtained by sending a specific written request to the e-mail address privacy@texa.it.

TEXA has appointed Mr. Bidogia Gianluca as Data Protection Officer, in order to ensure that the data of data subjects are treated in a transparent, accurate manner and in compliance with the regulations in force concerning the protection of personal data (Legislative Decree 196/2003 and smi, EU Regulation n. 2016/679).

The Data Protection Officer can be contacted at the email address DPO@texa.com or at the telephone number (+39) 0422791393.

Legal conditions for the processing of personal data

The processing of personal data above described is authorized by the European legislation on data processing, on the basis of the following legal requirements:

Consent: if the user has consented to their use, it can be revoked at any time via the Customer Interaction Center of BMW or through the Customer Portal;

Execution of pre-contractual measures or fulfilment of contractual obligations: if it is necessary to conclude or fulfil a contract with TEXA or to implement pre-contractual measures;

Legal Obligations: if for TEXA it is necessary to use personal data to comply with its legal obligations;

Legitimate interest: if TEXA uses personal data to pursue a legitimate interest and its motivations are greater than any prejudice to data protection rights;

Legitimate interest: if necessary for TEXA to defend itself, to take legal action or to make claims in its own or against third parties;

Authorized treatments are possible based on additional assumptions; in this case, TEXA will do what it reasonably can in order to identify this assumption and give it appropriate communication.

6. PRIVACY POLICY UPDATES

TEXA’S privacy policy may require updates. It is therefore advisable to check this web page on a regular basis and to refer to the most up-to-date version of the information provided.